Do you have "Spyware" on your system? Parasites or an Unwanted Search Engine? Don't panic -- this is a learning experience on how some of these so-called friendly companies treat you as a valued customer! You will be totally surprised to know how sneaky and underhanded some of these companies are.

What is Spyware? A technology that assists in gathering information about a person or organization without their knowledge. On the Internet, "spyware is programming that is put in someone's computer to secretly gather information about the user and relay it to advertisers or other interested parties. "These type applications also in many cases can cause unknown browser problems.

How did this happen?
When your Security settings are "soft" these sites take advantage of this and actually install software on your system without your knowledge or consent. In other cases downloaded software comes bundled with other "components" (spyware\adware) that you don't realize exists until you start having problems or discover your browser has been hijacked.

Recommended Minimal Security SettingsIn most cases the "default" settings are not enough to properly protect your machine. In other cases, the new rash of Trojans will actually lower your Security settings for the "Internet Zone", thus bypassing any security you thought you had. To reset your machine to the Default Level:
Close all instances of Internet Explorer and Outlook Express
Open Control Panel | Internet Options | Click on the "Security" tab
Highlight the "Internet" icon, click "Default Level"
To setup the "Internet Zone" with a Custom Level (recommended)
Next: Click on the "Content" tab, Click the "Publishers" button

Click on the "Advanced" tab
Uncheck: "Install on demand (other)", click Apply\Ok
To test your setup after making the above changes [click here]

How To: Prevent this from happening again?
The first thing you must remember is that adware\spyware tools are basically for removal after the fact. The trick is "Layered Protection for maximum prevention"!

One of the newer tricks Coolwebsearch uses is to block the infected user from accessing most major anti-spyware programs and sites. If you are experiencing this problem, then Download: CWS.SmartKiller [site2]

Double-check your system with HijackThis! (after using one of the above programs)
Download: HijackThis 1.99 from: [author] [site1] [site2] [site3]

Note: Since HijackThis does not (yet) come with a install routine, create a folder via Windows Explorer for HijackThis, then move the file to this folder. This way any backups created are saved in a legit folder. You should also make sure you are using the latest version each and every time you run HijackThis, as there are new detections added all the time.
Unzip, double-click "HijackThis.exe" and Press "Scan and save".
When the scan is finished, the "Scan" button will change into a "Save Log" button.
Click: "Save Log" (generates: "hijackthis.log") HijackThis Tutorial (recommended read)

Now, either copy / paste the Hijackthis Logfile into the white box or upload the saved file from your PC using the browse function. Select the "improved analyzing" option too. Click on "analyze" button. Go through the results. Anything with a "RED EXCLAMATION" mark can be safely fixed. Fix other results as needed. If you are in doubt post the logfile in any forum that deals with spywares and ask for confirmation. You can also save the results for three days in the website for future reference or save the page to your harddisk by rightclicking and "save page as".

Dealing with Coolwebsearch and affiliatesCWShredder 2.12 - Originally developed and updated by a graduate student in the Netherlands, CWShredder™ is now maintained by InterMute.
Download: direct from InterMute or MajorGeeks
Removes most Coolwebsearch and affiliates infections read this first!
Then follow up with either Ad-Aware and\or SpyBot, and then run HijackThis!

Note: there are now nearly 10,000 Coolwebsearch affiliates!
They do this as a "Pay-per-Click" scheme, basically getting a few cents for each user that gets hijacked to Coolwebsearch or one of it's major affiliates. Nice guys huh? Most of these affiliates are Adult related, so be careful where you surf and practice Safe ***!

Additional PreventionBoth the HOSTS file and the Restricted Zone entries target most of the major parasites, hijackers and unwanted search engines. If you are also having trouble with unwanted pop-ups - [start here] There are however several severe security risks that still exist in Internet Explorer. Until Microsoft releases a (hot fix) patch, users can protect themselves by taking several other steps. [more info]